The future of critical infrastructure in the cloud in Slovakia is linked to digital sovereignty and clear rules for working with important data. The panelists agreed that key data must remain under state control—physically, legally, and operationally—yet there is also room for cooperation with the market and hybrid models. A strong theme is the state’s resilience to outages and crises, as well as the ability to innovate quickly.
Government cloud as strategic infrastructure
The government cloud should not be understood as an isolated IT project, but as infrastructure comparable in importance to railways or the power grid. The law defines its components: private, public, and community; cloud services must be recorded in a catalog and meet the specified requirements. The informatization ministry is responsible for the rules and regulation, while the Ministry of the Interior is the key operator; this model is known from neighboring countries as well. The challenge is more organizational than technological: better interministerial coordination, clear rules and methodologies, and stable funding.
Resilience is already being taken into account: there are two government cloud sites and outage scenarios including a “blackout,” which are tested and updated. It is important that every ministry knows whether its system will survive an attack and a longer outage, and how to restore it. Beyond cybersecurity, the physical protection of data centers is coming to the fore—an attack “on the metal” can be cheaper and simpler. Slovak sites, such as Tajov, are built with a high degree of resilience, which is an advantage over urban locations.
Certification, rules, and room for innovation
The European cloud certification scheme is not moving forward yet, so a balance is being sought between security requirements and the speed of service deployment. There are levels of requirements for services, but it is not a full-fledged certification; the state is considering strengthening binding standards for architecture, audit, and recovery. It will be important to set methodologies and approvals in a “friendly” way so that security does not halt innovation or migration to the private part of the government cloud. Updating legislation can bring faster decision-making in crises and clearer rules for providers and users alike.
The cloud should be a driver of innovation, not a synonym for exiling data abroad—therefore hybrid models naturally prevail. The state wants to accelerate capacity building and provide AI services directly within the government cloud so that data stays in Slovakia. Given its size, Slovakia is ideal for pilots and proofs of concept of new technologies, which can bring rapid improvements in services for citizens. Public authorities are also encouraged to make greater use of the ready infrastructure that combines security, availability, and room for modernization.